后端：增加获得七牛的 token 接口

admin/admin-application/src/main/java/cn/iocoder/mall/admin/application/config/MVCConfiguration.java

@@ -5,11 +5,17 @@ import cn.iocoder.common.framework.servlet.CorsFilter;
 import cn.iocoder.mall.admin.sdk.interceptor.AdminAccessLogInterceptor;
 import cn.iocoder.mall.admin.sdk.interceptor.AdminSecurityInterceptor;
 import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.annotation.Value;
 import org.springframework.boot.web.servlet.FilterRegistrationBean;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.context.annotation.Import;
-import org.springframework.web.servlet.config.annotation.*;
+import org.springframework.web.servlet.config.annotation.EnableWebMvc;
+import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
+import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+
+import java.util.Set;
 
 @EnableWebMvc
 @Configuration
@@ -24,13 +30,15 @@ public class MVCConfiguration implements WebMvcConfigurer {
     private AdminSecurityInterceptor adminSecurityInterceptor;
     @Autowired
     private AdminAccessLogInterceptor adminAccessLogInterceptor;
-//
+
+    @Value("${auth.ignore-urls}")
+    private Set<String> ignoreUrls;
+
     @Override
     public void addInterceptors(InterceptorRegistry registry) {
 //        registry.addInterceptor(securityInterceptor).addPathPatterns("/user/**", "/admin/**"); // 只拦截我们定义的接口
         registry.addInterceptor(adminAccessLogInterceptor).addPathPatterns("/admins/**");
-        registry.addInterceptor(adminSecurityInterceptor).addPathPatterns("/admins/**")
-                .excludePathPatterns("/admins/passport/login"); // 排除登陆接口
+        registry.addInterceptor(adminSecurityInterceptor.setIgnoreUrls(ignoreUrls)).addPathPatterns("/admins/**");
     }
 
     @Override

admin/admin-application/src/main/java/cn/iocoder/mall/admin/application/config/QiniuConfiguration.java

@@ -0,0 +1,21 @@
+package cn.iocoder.mall.admin.application.config;
+
+import com.qiniu.util.Auth;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+
+@Configuration
+public class QiniuConfiguration {
+
+    @Value("${qiniu.access-key}")
+    private String accessKey;
+    @Value("${qiniu.secret-key}")
+    private String secretKey;
+
+    @Bean
+    public Auth auth() {
+        return Auth.create(accessKey, secretKey);
+    }
+
+}

admin/admin-application/src/main/java/cn/iocoder/mall/admin/application/controller/admins/FileController.java

@@ -0,0 +1,33 @@
+package cn.iocoder.mall.admin.application.controller.admins;
+
+import cn.iocoder.common.framework.vo.CommonResult;
+import com.qiniu.util.Auth;
+import io.swagger.annotations.Api;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+@RestController
+@RequestMapping("admins/file")
+@Api("文件模块")
+public class FileController {
+
+    private Logger logger = LoggerFactory.getLogger(getClass());
+
+    @Autowired
+    private Auth auth;
+    @Value("${qiniu.bucket}")
+    private String bucket;
+
+    @GetMapping("/get_qiniu_token")
+    public CommonResult<String> getQiniuToken() {
+        String token = auth.uploadToken(bucket);
+        logger.info("[qiniu_token][token({}) get]", token);
+        return CommonResult.success(token);
+    }
+
+}

admin/admin-application/src/main/resources/application.yaml

@@ -6,4 +6,14 @@ spring:
 server:
   port: 18083
   servlet:
-    context-path: /admin-api/
+    context-path: /admin-api/
+
+# auth
+auth:
+  ignore-urls: /admin-api/admins/admin/passport/login, /admin-api/admins/file/get_qiniu_token
+
+# qiniu
+qiniu:
+  access-key: YldfyUC7OewoWM63TPYTairqnq8GMJvNek9EGoID
+  secret-key: zZ7Q8wwZRyaklVvkyLmVydA4WygOBqtc_gTYzalS
+  bucket: onemall